Skip to content
OpenAdvisories

Vendor

formio

1 known vulnerabilities.

Products

formio 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-67718

    Formio improperly authorized permission elevation through specially crafted request path

    Form.io is a combined Form and API platform for Serverless applications. Versions 3.5.6 and below and 4.0.0-rc.1 through 4.4.2 contain a flaw in path handling which could allow an attacker to access protected API endpoints by sending a crafted request path. A…

    formio formio formio npm